Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
bbpro1960.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
bbpro1960.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
keygen.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
keygen.exe
Resource
win10v2004-20240709-en
General
-
Target
4ba8827b6a62b8fd70a2a2983a4a9bed_JaffaCakes118
-
Size
15.5MB
-
MD5
4ba8827b6a62b8fd70a2a2983a4a9bed
-
SHA1
64b2130e7fdc5e53e4da90bc163cbdfacdb855c8
-
SHA256
4592f75d427b7d51f455303ad81e15bc6bd90597145754ed108e9131d56b2934
-
SHA512
9497a93ed8ccb128ec7d05471c3a8f274215914704dd6ed422b6c68912e0e354e709e7cd5f99952e933a78871b7d879a731cfdccc802922b13ed51bf5b608c7b
-
SSDEEP
393216:6I+hs7QJ/7kkPfZE+fcnOiRW4vZWFQINgqS:5+hvhkufZEmzOW/FNyqS
Malware Config
Signatures
-
resource yara_rule static1/unpack001/bbpro1960.exe upx static1/unpack001/keygen.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/bbpro1960.exe unpack001/keygen.exe
Files
-
4ba8827b6a62b8fd70a2a2983a4a9bed_JaffaCakes118.rar
-
155绿色软件站.url.url
-
bbpro1960.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
keygen.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE